@elastic/ems-client - npm Package Compare versions

Comparing version 8.5.2 to 8.5.3

CHANGELOG.md

@@ -6,2 +6,7 @@ # Changelog
 
+## [8.5.3] - 2024-07-10
+
+### Changed
+- Update dependencies #242
+
 ## [8.5.2] - 2024-07-05
@@ -8,0 +13,0 @@

package.json

 {
   "name": "@elastic/ems-client",
-  "version": "8.5.2",
+  "version": "8.5.3",
   "description": "JavaScript client library for the Elastic Maps Service",
@@ -38,5 +38,5 @@ "main": "target/node/index.js",
     "chroma-js": "^2.1.0",
-    "lodash": "^4.17.15",
-    "lru-cache": "7.18.3",
-    "semver": "7.6.2",
+    "lodash": "^4.17.21",
+    "lru-cache": "^4.1.5",
+    "semver": "^7.6.2",
     "topojson-client": "^3.1.0"
@@ -55,3 +55,3 @@ },
     "@types/lodash": "^4.14.150",
-    "@types/lru-cache": "^7.10.10",
+    "@types/lru-cache": "^5.1.0",
     "@types/node": "^20.12.13",
@@ -58,0 +58,0 @@ "@types/node-fetch": "^2.5.7",

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

794584

decreased by-4.79%

Number of package files

78

decreased by-7.14%

Lines of code

24976

decreased by-3.85%

Number of low supply chain risk alerts

1

increased byInfinity%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedlru-cache@4.1.5(transitive)

• + Addedpseudomap@1.0.2(transitive)

• + Addedsemver@7.7.1(transitive)

• + Addedyallist@2.1.2(transitive)

• - Removedlru-cache@7.18.3(transitive)

• - Removedsemver@7.6.2(transitive)

• Updatedlodash@^4.17.21

• Updatedlru-cache@^4.1.5

• Updatedsemver@^7.6.2